Paypal ERROR checkPaypalIps: Error with REMOTE IP ADDRESS

[sean_nwfs]

Struggling with the same issue. I spoke with Paypal and they sent this list: https://www.paypal.com/us/smarthelp/article/what-are-the-ip-addresses-for-live-paypal-servers-ts1056. Not sure if this might be useful to the devs.

I also appreciate the new feature in 3.6.4 for adding extra IPs for IPN Check.

Joomla 3.9.12
VM 3.6.4.10187

[StefanSTS]

The first sentence in the link says what VirtueMart should do:
"When you make API calls, PayPal strongly recommends that you use Domain Name Service (DNS) results with the default Time To Live (TTL) values, to determine the IP addresses of our servers."

VirtueMart does that, and there is the issue with Paypal. Not all addresses are returned. That is why the IPN is rejected.

We will see how it goes on.

Thanks for your effort in communicating with Paypal. The more the merrier, someone the right support person might actually be able to help.

Regards
Stefan

[sean_nwfs]

Again, not sure if this is helpful but they wrote back.

"If plugin can do an nslookup against the IP address (not the host name), you'll see that it resolves to notify.paypal.com, and as such, can be trusted & know the IPN came from a valid PayPal IP."

Not sure if the plugin can do that or not.

Thanks!

[Jörgen]

Again, not sure if this is helpful but they wrote back.

"If plugin can do an nslookup against the IP address (not the host name), you'll see that it resolves to notify.paypal.com, and as such, can be trusted & know the IPN came from a valid PayPal IP."

Not sure if the plugin can do that or not.

Thanks!

Looks like the solution studio42 suggested earlier.

Jörgen @ Kreativ Fotografi

[ssc3]

"If plugin can do an nslookup against the IP address (not the host name), you'll see that it resolves to notify.paypal.com, and as such, can be trusted & know the IPN came from a valid PayPal IP."

WorldPay also recommend using Reverse DNS lookup, it does not seem to cause the same problems PayPal is having with with lists of IP addresses.

[Milbo]

So the solution is perhaps to mix the 2 codes because in some case the returned domaine is the IP itself !

Like that?

Code: [Select]

if ($this->_method->sandbox) {
$paypalHosts = array('ipn.sandbox.paypal.com','ipnpb.sandbox.paypal.com');
} else {
$paypalHosts = array('ipnpb.paypal.com','notify.paypal.com');
}

$paypal_iplist = array();
foreach($paypalHosts as $host){
$ipList = gethostbynamel($host);
$paypal_iplist = array_merge($paypal_iplist,$ipList);
}
if (isset($this->_method->extra_ips)){
$extraIps = explode(',',$this->_method->extra_ips);
$paypal_iplist = array_merge($paypal_iplist,$extraIps);
}

$this->debugLog($paypal_iplist, 'checkPaypalIps $paypal_iplist', 'debug', false);

$remoteIPAddress = ShopFunctions::getClientIP();
$hostname = gethostbyaddr($remoteIPAddress);
$this->debugLog($remoteIPAddress, 'checkPaypalIps REMOTE ADDRESS', 'debug', false);

//  test if the remote IP connected here is a valid IP address
if (!in_array($remoteIPAddress, $paypal_iplist) and !in_array($hostname, $paypalHosts)) {

$text = "Error with REMOTE IP ADDRESS = " . $remoteIPAddress . ".\n
                        The remote address of the script posting to this notify script does not match a valid PayPal IP address\n
            These are the valid IP Addresses: " . implode(",", $paypal_iplist) . "The Order ID received was: " . $order_number;
$this->debugLog($text, 'checkPaypalIps', 'error', false);
return false;
}


[Studio 42]

Yes,
i don't tested, but it's what i mean

So the solution is perhaps to mix the 2 codes because in some case the returned domaine is the IP itself !

Like that?

Code: [Select]

      if ($this->_method->sandbox) {
         $paypalHosts = array('ipn.sandbox.paypal.com','ipnpb.sandbox.paypal.com');
      } else {
         $paypalHosts = array('ipnpb.paypal.com','notify.paypal.com');
      }

      $paypal_iplist = array();
      foreach($paypalHosts as $host){
         $ipList = gethostbynamel($host);
         $paypal_iplist = array_merge($paypal_iplist,$ipList);
      }
      if (isset($this->_method->extra_ips)){
         $extraIps = explode(',',$this->_method->extra_ips);
         $paypal_iplist = array_merge($paypal_iplist,$extraIps);
      }

      $this->debugLog($paypal_iplist, 'checkPaypalIps $paypal_iplist', 'debug', false);

      $remoteIPAddress = ShopFunctions::getClientIP();
      $hostname = gethostbyaddr($remoteIPAddress);
      $this->debugLog($remoteIPAddress, 'checkPaypalIps REMOTE ADDRESS', 'debug', false);

      //  test if the remote IP connected here is a valid IP address
      if (!in_array($remoteIPAddress, $paypal_iplist) and !in_array($hostname, $paypalHosts)) {

         $text = "Error with REMOTE IP ADDRESS = " . $remoteIPAddress . ".\n
                        The remote address of the script posting to this notify script does not match a valid PayPal IP address\n
            These are the valid IP Addresses: " . implode(",", $paypal_iplist) . "The Order ID received was: " . $order_number;
         $this->debugLog($text, 'checkPaypalIps', 'error', false);
         return false;
      }


[hegbi]

tested, Revision 10195 works, thank you!!

[pellegrinoL]

Hi,

I am using VirtueMart 3.4.3 10005 and Joomla! 3.8.13

since 3 days I am having this problem see:
These are the valid IP Addresses: 173.0.88.40,66.211.169.17,173.0.84.40,173.0.88.8,173.0.81.33,173.0.81.1The Order ID received was: Ordine-2020-2460
2020-10-20 09:22:50 ERROR checkPaypalIps: Error with REMOTE IP ADDRESS = 66.211.170.66.
The remote address of the script posting to this notify script does not match a valid PayPal IP address

Have I to contact PayPal to solve this issue or is temporary problem?

Best

[AH]

Please search the forums for similar posts and resolutions

It could be your web host routing internal IPs

[Studio 42]

You can disable IP check in the plugin.

[pellegrinoL]

Many thanks, I will try